Privacy Policy
Effective as of 18 August 2026
This privacy policy applies to the Scoff app for mobile devices, together with any related services operated by Ailsa S (collectively, the “Application”). Ailsa S is hereby referred to as the “Service Provider”.
Information Collection and Use
The Application collects the following information when you use it:
- Nutrition and dietary information including food logs, calorie goals and macro targets — stored locally on your device
- Camera access — used solely for barcode scanning and meal photos. No images are stored or transmitted externally
Most of this information — including your food logs, calorie goals, macro targets and any weight data — is stored locally on your device only and is never transmitted to, or accessible by, the Service Provider. Because this information never reaches us, we do not process it as a data controller in the way described in this policy; you remain in control of it at all times, and it is removed automatically if you uninstall the Application. The only information that reaches the Service Provider is described in Third Party Access and Data Retention Policy below (for example, custom foods you choose to submit to the community database).
Legal Basis for Processing (UK & EU Users)
Where the Service Provider does process personal data — such as custom food submissions to the community database — we rely on the following legal bases under the UK GDPR and EU GDPR:
- Consent — where you actively choose to submit a custom food to the shared community database
- Legitimate interests — to maintain, secure and improve the Application and the shared food database, in a way that does not override your rights and interests
- Legal obligation — where we need to retain or disclose information to comply with the law
Some information you choose to enter into the Application, such as nutrition and dietary logs, may be considered health-related information. As set out above, this information is stored locally on your device and is not transmitted to or processed by the Service Provider. Where any special category data is ever submitted to us directly (for example, in an email to support), our lawful basis for processing it is your explicit consent, given by the act of sending it to us.
Cookies and Tracking Technologies
The Application does not use cookies or tracking technologies.
Your Rights
You may request access to, correction of, restriction of, or deletion of your personal data held by the Service Provider, object to our processing of it, or request a copy of it in a portable format. You may also withdraw any consent you've given at any time. To exercise these rights, contact the Service Provider at hello@scoffapp.com.au.
If you are in the United Kingdom or European Union and are not satisfied with how we've handled your personal data, you have the right to lodge a complaint with your local supervisory authority — in the UK, this is the Information Commissioner's Office (ICO). We'd appreciate the chance to address your concern directly first at hello@scoffapp.com.au, but you're not required to contact us before contacting the ICO.
Your California Privacy Rights (CCPA/CPRA)
If you are a California resident, you have the right to know what personal information is collected, the right to delete personal information, the right to opt out of the sale or sharing of personal information, and the right to non-discrimination for exercising these rights. To exercise your CCPA/CPRA rights, contact the Service Provider at hello@scoffapp.com.au.
Third Party Access
The Service Provider uses the following third party services:
- Open Food Facts (open-source food database) — openfoodfacts.org/terms-of-use
- Supabase (community food database) — supabase.com/privacy
- Apple App Store (payments) — apple.com/legal/privacy
The Service Provider may disclose information:
- as required by law, such as to comply with a subpoena or similar legal process
- when they believe in good faith that disclosure is necessary to protect their rights, protect your safety or the safety of others, investigate fraud, or respond to a government request
International Data Transfers
The Service Provider uses Supabase for the community food database, which may store data on servers outside Australia, including outside the United Kingdom and European Economic Area. Where personal data is transferred internationally, we rely on appropriate safeguards recognised under the UK GDPR and EU GDPR — such as the UK International Data Transfer Agreement (IDTA), the EU Standard Contractual Clauses, or transfers to a jurisdiction covered by an applicable adequacy decision. For more information about Supabase's own safeguards, see supabase.com/privacy.
Opt-Out Rights
You can stop all collection of information by uninstalling the Application.
To request deletion of your personal data contact the Service Provider at hello@scoffapp.com.au.
Data Retention Policy
- User food logs and nutrition data: retained on your device for the duration of your use of the Application
- Community food submissions: retained in the Supabase database indefinitely as anonymised entries not linked to personally identifiable information
- Data required for legal compliance: retained as long as required by applicable law
When you create a custom food in the Application, the food's details (such as its name, brand, and nutritional information) are uploaded to a shared community database so that other users of the Application can search for and use it. This submission includes a device identifier and your country, but does not include your name, email address, or any other personally identifying information. Your food diary, weight data, and other personal logs are never shared to the community database. If you would like a custom food you created removed from the community database, please contact the Service Provider at hello@scoffapp.com.au.
Children
The Application is not intended for children under 16 years of age. The Service Provider does not knowingly collect personally identifiable information from children. If you believe a child has provided personal information through the Application, please contact hello@scoffapp.com.au.
Security
The Service Provider is concerned about safeguarding the confidentiality of your information and provides physical, electronic, and procedural safeguards to protect information the Service Provider processes and maintains.
Data Breach Notification
If a data breach occurs that affects your personal data, the Service Provider will notify you in accordance with applicable legal requirements.
Changes
The Service Provider may update this Privacy Policy from time to time. The updated policy will be posted with a new effective date.
This privacy policy is effective as of 2026-08-18.
Your Consent
By using the Application you consent to the collection and use of information as described in this policy. You may withdraw consent at any time by contacting hello@scoffapp.com.au or by uninstalling the Application.
Contact Us
If you have any questions regarding privacy while using the Application, or have questions about the practices, please contact the Service Provider via email at hello@scoffapp.com.au.